Since I have disabled encryption in a QUIC implementation, the interaction between the client and server takes place in plain text. However, Wireshark still attempts to decrypt the interaction and fails to dissect the plain text. I am wondering if there is a way to disable Wireshark's attempt to decrypt QUIC traffic.
There are open issues (Disable encryption #181, Disable encryption #483) on the h2o/quicly Github.
It would be better if they would follow something like the draft-banks-quic-disable-encryption-00 which might then be added to Wireshark.
Until then, there is a GQUIC preference (QUIC: Add preference to force decode all payload) that maybe could be duplicated in the QUIC dissector. Please open a Enhancement/Feature request on the Wireshark Gitlab Issues page.
(If you open a Feature Request, please add a link back to this question)
Reference: Quic Conversation decipher
Asked: 2022-07-20 08:45:29 +0000
Seen: 231 times
Last updated: Jul 20 '22
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
Are you using a "standard" such as draft-banks-quic-disable-encryption-00 ?
The implementation (https://github.com/h2o/quicly) does not support it. So, I just disable encryption/decryption functions.